
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
@iobroker/plugin-base
Advanced tools
Base Package for Plugins
This package allows to extend ioBroker with a plugin system. Plugins can add specialized functionality and can run inside an adapter or also inside the js-controller. Plugins are no adapters and so have - by definition - a limited featureset and a mainly static configuration.
const {PluginBase} = require('@iobroker/plugin-base');
class MySuperPlugin extends PluginBase {
constructor(settings) {
super(settings);
}
/**
* Register and initialize Plugin
*
* @param pluginConfig {object} plugin configuration from config files
* @param callback {function} callback when done, signature "(err, initSuccessful)". On err or initSuccessful===false the plugin instance will be discarded
*/
init(pluginConfig, callback) {
if (!pluginConfig.enabled) {
this.log.info('Sentry Plugin disabled by user');
return void callback(null, false);
}
// initialize your code here
callback(null, true);
}
/**
* Method which is called on a clean end of the process to pot. clean up used resources
*/
destroy() {
// Implement in your Plugin instance if needed
}
}
module.exports = MySuperPlugin;
The object offers the following "public" variables and methods to be used in your implementation:
Plugins are configured inside io-package.json in common area or in iobroker-data/iobroker.json on main level in a plugins key:
"plugins": {
"MySuperPlugin": {
"enabled": true,
"key": "value"
...
}
}
The configuration here is enhanced by an "enabled" key and passed to the "init" method. The configuration can also contain "enabled" as boolean field directly which then acts as default value. If "enabled" is not included the plugin will be activated by default!
One example is the Sentry plugin available at https://github.com/ioBroker/plugin-sentry
Breaking Changes:
async
postfix are now working renamed to methods without the postfix
while the callback methods have been removedinstanciatePlugin
to instantiatePlugin
isPluginInstanciated
to isPluginInstantiated
FAQs
Base module for plugins for js-controller and adapters
We found that @iobroker/plugin-base demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.